This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft
File:                     DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft (raw, json)
Hash identifier:          7VXND/gxJ/FnW0Ijz1YxcG4tyEgciqJeeDAsUhJCBOU=
Subject key identifier:   4E:66:BE:C0:F2:AA:D3:FB:B3:3F:C4:F8:01:F4:7F:0B:6E:9D:89:6A
Authority key identifier: DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D
Certificate issuer:       /CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
Certificate serial:       2201BA8B91CF25A8EC18B3B132A3DF878ED64AB6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft
Manifest number:          0156
Signing time:             Wed 31 Dec 2025 20:22:03 +0000
Manifest this update:     Wed 31 Dec 2025 20:17:03 +0000
Manifest next update:     Tue 06 Jan 2026 12:10:03 +0000
Files and hashes:         1: 323830333a333732303a3a2f33322d3438203d3e20323636373636.roa (hash: ZQoklwXC2nG2ewll2EesIhbvcuq+xMzcTEJ7FG2QJAo=)
                          2: 34352e3233342e36332e302f32342d3234203d3e20323732383635.roa (hash: JnHrcURzpga4YC2opV6zNkojVQJhrDonKCnhFJ7yvTY=)
                          3: DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl (hash: c+iwZu5GQv7yAE+4axW/Ay7ZJrZ+8ePrI8NB9Sgd4xo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 Jan 2026 00:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:01:ba:8b:91:cf:25:a8:ec:18:b3:b1:32:a3:df:87:8e:d6:4a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
        Validity
            Not Before: Dec 31 20:17:03 2025 GMT
            Not After : Jan  6 12:10:03 2026 GMT
        Subject: CN=4E66BEC0F2AAD3FBB33FC4F801F47F0B6E9D896A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:8a:97:79:c9:b9:da:a4:59:5e:7d:ea:4e:
                    66:74:f0:9f:c7:18:c8:60:96:fc:e2:4a:8a:ca:b1:
                    6d:6d:5c:34:db:5e:16:58:a6:79:9a:4c:7d:9e:63:
                    2c:d3:50:49:6b:34:9a:fa:11:86:0f:80:ec:38:d2:
                    de:58:67:cc:83:47:01:a0:c7:ac:c2:18:7a:91:33:
                    8f:6d:29:08:88:4a:d5:60:06:2d:71:a9:6d:6a:a8:
                    55:67:ae:3c:70:1c:59:cc:8d:6a:92:14:1d:72:5a:
                    b5:a6:02:ca:53:02:16:3c:0b:db:e2:d8:6b:03:6e:
                    86:ff:e6:0a:b5:42:4d:2f:59:30:1f:85:02:77:0b:
                    68:7a:6f:b6:bd:d7:43:d2:21:75:4f:23:33:f8:0c:
                    6b:73:28:97:cd:9f:64:67:40:10:d4:6e:a3:80:90:
                    d6:23:52:01:b5:a0:35:10:9c:a5:d1:c1:f0:4e:f6:
                    78:72:32:e8:a1:01:88:6c:99:d5:ff:35:67:8b:a4:
                    01:0a:ba:07:22:90:2c:5e:1c:ed:6b:6e:41:00:35:
                    b4:ad:84:9e:80:55:18:ba:a1:28:e0:e5:df:f0:e6:
                    ea:c5:93:ec:c2:2e:93:64:ef:7b:41:8f:d9:4f:3c:
                    b0:e0:32:1f:d1:90:74:a0:54:be:f6:2e:3d:cd:40:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:66:BE:C0:F2:AA:D3:FB:B3:3F:C4:F8:01:F4:7F:0B:6E:9D:89:6A
            X509v3 Authority Key Identifier:
                keyid:DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:29:1f:70:c7:72:ad:4e:b7:0c:73:2d:31:03:82:60:d9:51:
         b8:92:ca:39:d4:5f:cf:a6:25:8d:43:3c:1e:f6:de:2e:3e:86:
         48:ab:34:02:a5:4e:75:f6:6f:62:a7:76:f0:61:d0:7e:ce:43:
         f9:62:b6:df:12:c5:1c:e2:1d:c0:80:bd:5b:50:45:ea:28:f4:
         95:b1:5e:e6:fa:8c:ac:b3:77:5e:1f:6e:b3:08:1e:c2:85:06:
         a4:33:36:b6:b4:55:3c:aa:a9:6f:b3:56:7e:eb:ee:bc:8b:a3:
         4d:3b:d8:e0:1c:7a:68:39:2f:57:d3:14:1d:62:bb:cb:79:02:
         a6:c4:8b:13:e7:bd:b0:c6:5a:22:56:99:7f:2c:64:08:bb:e3:
         0f:3e:52:0c:9c:e7:25:c7:51:3a:b1:ab:f5:04:ed:c5:7b:b1:
         d7:75:76:65:33:99:a3:88:04:a3:24:ff:48:16:dc:d3:97:ec:
         3c:fc:44:3b:1d:63:d9:fd:da:2b:13:75:34:98:c0:07:4d:53:
         f9:92:c9:8b:bd:75:fa:42:d2:f9:7e:42:28:35:a5:70:91:c9:
         c6:83:b7:e3:84:9e:85:47:dd:9c:de:55:10:76:c8:7f:e1:0a:
         fc:33:26:7c:69:03:60:1b:ca:e9:56:74:46:da:cd:0e:d9:4b:
         c1:91:91:f2
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIgG6i5HPJajsGLOxMqPfh47WSrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyODZBODNCRTc3QzQyQkEyRDJCQkM4RTVBNENDQUYx
OTYwMjY0RDAeFw0yNTEyMzEyMDE3MDNaFw0yNjAxMDYxMjEwMDNaMDMxMTAvBgNV
BAMTKDRFNjZCRUMwRjJBQUQzRkJCMzNGQzRGODAxRjQ3RjBCNkU5RDg5NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmYoqXecm52qRZXn3qTmZ08J/H
GMhglvziSorKsW1tXDTbXhZYpnmaTH2eYyzTUElrNJr6EYYPgOw40t5YZ8yDRwGg
x6zCGHqRM49tKQiIStVgBi1xqW1qqFVnrjxwHFnMjWqSFB1yWrWmAspTAhY8C9vi
2GsDbob/5gq1Qk0vWTAfhQJ3C2h6b7a910PSIXVPIzP4DGtzKJfNn2RnQBDUbqOA
kNYjUgG1oDUQnKXRwfBO9nhyMuihAYhsmdX/NWeLpAEKugcikCxeHO1rbkEANbSt
hJ6AVRi6oSjg5d/w5urFk+zCLpNk73tBj9lPPLDgMh/RkHSgVL72Lj3NQLq7AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUTma+wPKq0/uzP8T4AfR/C26diWowHwYDVR0j
BBgwFoAU3Shqg753xCui0rvI5aTMrxlgJk0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTQ3RERFQkQxOEM4MzQ5M0QxQTExQUVEQjU0MUE1RTMw
RTE4M0RGMjRFQUNGN0YyNTRCMkU2MUEzNjM4N0EwLzAvREQyODZBODNCRTc3QzQy
QkEyRDJCQkM4RTVBNENDQUYxOTYwMjY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDI4NkE4M0JFNzdDNDJCQTJE
MkJCQzhFNUE0Q0NBRjE5NjAyNjRELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU0N0RERUJEMThDODM0OTNEMUExMUFFREI1NDFBNUUzMEUxODNERjI0
RUFDRjdGMjU0QjJFNjFBMzYzODdBMC8wL0REMjg2QTgzQkU3N0M0MkJBMkQyQkJD
OEU1QTRDQ0FGMTk2MDI2NEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfKR9wx3KtTrcMcy0xA4Jg2VG4
kso51F/PpiWNQzwe9t4uPoZIqzQCpU519m9ip3bwYdB+zkP5YrbfEsUc4h3AgL1b
UEXqKPSVsV7m+oyss3deH26zCB7ChQakMza2tFU8qqlvs1Z+6+68i6NNO9jgHHpo
OS9X0xQdYrvLeQKmxIsT572wxloiVpl/LGQIu+MPPlIMnOclx1E6sav1BO3Fe7HX
dXZlM5mjiASjJP9IFtzTl+w8/EQ7HWPZ/dorE3U0mMAHTVP5ksmLvXX6QtL5fkIo
NaVwkcnGg7fjhJ6FR92c3lUQdsh/4Qr8MyZ8aQNgG8rpVnRG2s0O2UvBkZHy
-----END CERTIFICATE-----
Generated at Thu Jan 1 20:05:57 2026 by rpki-client